Live Messanger 9 help

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Uloguj se preko Facebooka da bi skinuo fajl:

- Kada se pijavim na WLM posle 3-4 sekunde program zasteka pojavi se not responding...izbaci me iz msn...i ponovo pocne da se konektuje.
- Pre 2 dana
- NOD32 nista ne nalazi
- CCleaner brisao registe..brisao program i foldere u porgram files i my documents
- adsl 1024
- laptop Toshiba l300-2ce



DDS (Ver_09-10-13.01) - NTFSx86
Run by Sale at 17:21:21,38 on sre 14.10.2009
Internet Explorer: 8.0.7600.16385
Microsoft Windows 7 Professional 6.1.7600.0.1252.1.1033.18.1916.737 [GMT 2:00]

AV: ESET Smart Security 3.0 *On-access scanning enabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
SP: ESET Smart Security 3.0 *enabled* (Updated) {E5E70D32-0101-4B98-A4D6-D1D15C3BB448}
FW: ESET Personal firewall *enabled* {E5E70D32-0101-4340-86A3-A7B0F1C8FFE0}

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\taskhost.exe
C:\Program Files\ESET\ESET Smart Security\ekrn.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Windows\System32\alg.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\System32\svchost.exe -k secsvcs
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Windows Media Player\wmplayer.exe
c:\program files\windows defender\MpCmdRun.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\system32\DllHost.exe
C:\Windows\system32\DllHost.exe
C:\Users\Sale\Downloads\dds.scr
C:\Windows\system32\conhost.exe

============== Pseudo HJT Report ===============

BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\progra~1\micros~2\office12\GR469A~1.DLL
BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: {DBC80044-A445-435b-BC74-9C25C1C588A9} - No File
uRun: [Skype] "c:\program files\skype\phone\Skype.exe" /nosplash /minimized
uRun: [DAEMON Tools Lite] "c:\program files\daemon tools lite\daemon.exe" -autorun
uRun: [Sidebar] c:\program files\windows sidebar\sidebar.exe /autoRun
mRun: [ITSecMng] %ProgramFiles%\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe /START
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
mRun: [Camera Assistant Software] "c:\program files\camera assistant software for toshiba\traybar.exe" /start
mRun: [NeroFilterCheck] c:\windows\system32\NeroCheck.exe
mRun: [GrooveMonitor] "c:\program files\microsoft office\office12\GrooveMonitor.exe"
mRun: [egui] "c:\program files\eset\eset smart security\egui.exe" /hide /waitservice
mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office12\EXCEL.EXE/3000
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~2\office12\ONBttnIE.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office12\REFIEBAR.DLL
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\progra~1\micros~2\office12\GRA32A~1.DLL
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\progra~1\micros~2\office12\GR469A~1.DLL

================= FIREFOX ===================

FF - ProfilePath - c:\users\sale\appdata\roaming\mozilla\firefox\profiles\4h6xyv1q.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/

============= SERVICES / DRIVERS ===============

R1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\drivers\vwififlt.sys [2009-7-14 48128]
R2 ekrn;Eset Service;c:\program files\eset\eset smart security\ekrn.exe [2008-3-13 472320]
R3 FwLnk;FwLnk Driver;c:\windows\system32\drivers\FwLnk.sys [2009-10-8 7168]
R3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\drivers\Rt86win7.sys [2009-6-10 139776]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\drivers\vwifimp.sys [2009-7-14 14336]
S2 NOD32FiXTemDono;Eset Nod32 Boot;c:\windows\system32\regedt32.exe [2009-7-14 9216]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-14 229888]
S3 StorSvc;Storage Service;c:\windows\system32\svchost.exe -k LocalSystemNetworkRestricted [2009-7-14 20992]

=============== Created Last 30 ================

2009-10-14 12:19 <DIR> --d----- C:\Temp
2009-10-13 20:45 5,702 a---h--- c:\windows\nod32restoretemdono.reg
2009-10-13 20:45 568 a---h--- c:\windows\nod32fixtemdono.reg
2009-10-13 20:45 <DIR> --d----- c:\users\sale\appdata\roaming\ESET
2009-10-13 20:44 <DIR> --d----- c:\program files\ESET
2009-10-13 17:25 <DIR> --d----- c:\program files\Microsoft
2009-10-13 17:25 <DIR> --d----- c:\program files\Windows Live SkyDrive
2009-10-13 17:10 <DIR> --d----- c:\program files\CCleaner
2009-10-13 15:27 <DIR> --d----- c:\windows\system32\appmgmt
2009-10-12 15:40 <DIR> --d----- c:\programdata\Office Genuine Advantage
2009-10-11 18:24 81,984 a------- c:\windows\system32\bdod.bin
2009-10-11 18:05 <DIR> --d----- c:\program files\common files\Softwin
2009-10-10 02:14 32,592 a------- c:\windows\system32\msonpmon.dll
2009-10-10 02:10 <DIR> --d----- c:\program files\Microsoft Visual Studio 8
2009-10-10 02:09 <DIR> --d----- c:\programdata\Microsoft Help
2009-10-10 02:05 <DIR> --d----- c:\programdata\DAEMON Tools Lite
2009-10-10 02:05 <DIR> --d----- c:\progra~2\DAEMON Tools Lite
2009-10-10 02:05 <DIR> --d----- c:\program files\DAEMON Tools Toolbar
2009-10-10 02:05 <DIR> --d----- c:\program files\DAEMON Tools Lite
2009-10-10 02:02 721,904 a------- c:\windows\system32\drivers\sptd.sys
2009-10-10 02:02 <DIR> --d----- c:\users\sale\appdata\roaming\DAEMON Tools Lite
2009-10-09 18:45 125,184 -------- c:\windows\system32\drivers\imagesrv.sys
2009-10-09 18:45 5,504 -------- c:\windows\system32\drivers\imagedrv.sys
2009-10-09 18:44 106,496 a------- c:\windows\system32\TwnLib20.dll
2009-10-09 18:44 155,648 a------- c:\windows\system32\NeroCheck.exe
2009-10-09 18:44 1,568,768 -------- c:\windows\system32\ImagX7.dll
2009-10-09 18:44 476,320 -------- c:\windows\system32\ImagXpr7.dll
2009-10-09 18:44 471,040 -------- c:\windows\system32\ImagXRA7.dll
2009-10-09 18:44 262,144 -------- c:\windows\system32\ImagXR7.dll
2009-10-09 18:41 <DIR> --d----- c:\program files\Webteh
2009-10-08 14:14 <DIR> --d----- c:\program files\uTorrent
2009-10-08 14:14 <DIR> --d----- c:\users\sale\appdata\roaming\uTorrent
2009-10-08 14:07 1,081,616 a------- c:\windows\system32\mscomctl.ocx
2009-10-08 14:07 152,848 a------- c:\windows\system32\Comdlg32.ocx
2009-10-08 14:07 9,728 a------- c:\windows\system32\TCMSVR.dll
2009-10-08 14:07 7,168 a------- c:\windows\system32\drivers\FwLnk.sys
2009-10-08 14:07 <DIR> --d----- c:\users\sale\appdata\roaming\WinBatch
2009-10-08 00:16 17,960 a------- c:\windows\system32\drivers\UVCFTR_S.SYS
2009-10-06 22:17 0 a---h--- c:\windows\system32\drivers\Msft_User_WpdFs_01_09_00.Wdf
2009-10-06 20:45 <DIR> --d----- c:\program files\common files\PX Storage Engine
2009-10-06 16:50 178,176 a------- c:\windows\system32\unrar.dll
2009-10-06 16:50 38 a------- c:\windows\avisplitter.ini
2009-10-06 16:50 839,680 a------- c:\windows\system32\lameACM.acm
2009-10-06 16:50 217,088 a------- c:\windows\system32\yv12vfw.dll
2009-10-06 16:50 118,784 a------- c:\windows\system32\ac3acm.acm
2009-10-06 16:50 414 a------- c:\windows\system32\lame_acm.xml
2009-10-06 16:50 881,664 a------- c:\windows\system32\xvidcore.dll
2009-10-06 16:50 205,824 a------- c:\windows\system32\xvidvfw.dll
2009-10-06 16:50 85,504 a------- c:\windows\system32\ff_vfw.dll
2009-10-06 16:50 547 a------- c:\windows\system32\ff_vfw.dll.manifest
2009-10-06 16:50 <DIR> --d----- c:\program files\K-Lite Codec Pack
2009-10-06 16:49 <DIR> --d----- c:\programdata\Adobe
2009-10-06 16:32 <DIR> --d----- c:\users\sale\appdata\roaming\LimeWire
2009-10-06 16:26 411,368 a------- c:\windows\system32\deploytk.dll
2009-10-06 14:58 <DIR> --d----- c:\users\sale\Tracing
2009-10-06 14:56 <DIR> --d----- c:\windows\PCHEALTH
2009-10-06 14:49 <DIR> --d----- c:\program files\common files\Windows Live
2009-10-06 14:47 <DIR> --d----- c:\programdata\ESET
2009-10-06 14:20 56 a---h--- c:\programdata\ezsidmv.dat
2009-10-06 14:20 56 a---h--- c:\progra~2\ezsidmv.dat
2009-10-06 14:18 <DIR> --d--r-- c:\program files\Skype
2009-10-06 14:18 <DIR> --d----- c:\programdata\Skype
2009-10-06 14:02 <DIR> --d----- c:\programdata\TOSHIBA
2009-10-06 13:55 <DIR> --d----- c:\program files\Toshiba
2009-10-06 13:54 <DIR> --dsh--- c:\windows\Installer
2009-10-06 13:54 <DIR> --d----- c:\windows\system32\v64002T_20090623_x32
2009-10-06 13:45 <DIR> --d----- c:\program files\Camera Assistant Software for Toshiba
2009-10-06 05:12 <DIR> --d----- c:\windows\Panther
2009-10-06 04:23 713,888 a------- c:\windows\system32\PerfStringBackup.INI
2009-10-06 04:23 <DIR> --d----- c:\windows\system32\wbem\Performance
2009-10-05 20:43 195,440 -------- c:\windows\system32\MpSigStub.exe
2009-10-05 20:35 <DIR> --d----- c:\users\Sale
2009-10-05 20:35 <DIR> --dsh--- C:\Recovery

==================== Find3M ====================

2009-08-03 15:07 403,816 a------- c:\windows\system32\OGACheckControl.dll
2009-08-03 15:07 322,928 a------- c:\windows\system32\OGAAddin.dll
2009-08-03 15:07 230,768 a------- c:\windows\system32\OGAEXEC.exe
2009-07-26 16:44 48,448 a------- c:\windows\system32\sirenacm.dll
2009-07-14 06:56 291,294 a------- c:\windows\inf\perflib\0409\perfi.dat
2009-07-14 06:56 291,294 a------- c:\windows\inf\perflib\0409\perfh.dat
2009-07-14 06:56 31,548 a------- c:\windows\inf\perflib\0409\perfd.dat
2009-07-14 06:56 31,548 a------- c:\windows\inf\perflib\0409\perfc.dat
2009-07-14 06:41 174 a--sh--- c:\program files\desktop.ini
2009-07-14 02:34 291,294 a------- c:\windows\inf\perflib\0000\perfi.dat
2009-07-14 02:34 291,294 a------- c:\windows\inf\perflib\0000\perfh.dat
2009-07-14 02:34 31,548 a------- c:\windows\inf\perflib\0000\perfd.dat
2009-07-14 02:34 31,548 a------- c:\windows\inf\perflib\0000\perfc.dat
2009-06-10 23:26 9,633,792 a--shr-- c:\windows\fonts\StaticCache.dat
2009-07-14 03:14 396,800 a--sh--- c:\windows\winsxs\x86_microsoft-windows-mail-app_31bf3856ad364e35_6.1.7600.16385_none_f12e83abb108c86c\WinMail.exe

============= FINISH: 17:21:55,03 ===============





mycity.rs/must-login.png

mycity.rs/must-login.png

mycity.rs/must-login.png

mycity.rs/must-login.png

mycity.rs/must-login.png

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Pozdrav...


U logovima nema tragova malware-a. Preporučio bih da u temi u Windows forumu potražiš dalje savete.

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Napisano: 14 Okt 2009 20:19

trazio sam...al su rekli ovde da se javim

Dopuna: 15 Okt 2009 10:27

Nasao sam jedan malware...preko nekog antivirusa. obrisao sam ga. treba li sta dalje da radim?

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Naziv detektovanog file-a?

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

neznam obrisao sam pa nemogu sada da nadjem

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Ja i dalje smatram da na ovoj 10 dana staroj instalaciji Windowsa 7 nema aktivnog malware-a (bar ga nije bilo u trenutku otvaranja teme).






Još jednom preporučujem da potražiš dalje savete u: http://www.mycity.rs/Windows/Live-Messanger-9.html